8732 matches found
Have you downloaded that Android malware from the Play Store lately?
This post has been updated to include the Malwarebytes detection for these Android apps. Security researchers have discovered banking Trojan apps on the Google Play Store, and say they have been downloaded by more than 300,000 Android users. As you may know, banking Trojans are kitted for stealin...
Most people aren’t upgrading to Windows 11: Not the end of the world
Windows 11 is experiencing an apparent lack of uptake among Windows users. If this survey is accurate, less than 1% of 10 million PCs surveyed are running the new operating system. In fact, more machines are using Windows XP. That may surprise you. It might even seem like a bit of an embarrassing...
[SECURITY] Fedora 35 Update: moby-engine-20.10.11-1.fc35
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between - and they don'...
4 Android Banking Trojan Campaigns Targeted Over 300,000 Devices in 2021
Four different Android banking trojans were spread via the official Google Play Store between August and November 2021, resulting in more than 300,000 infections through various dropper apps that posed as seemingly harmless utility apps to take full control of the infected devices. Designed to...
IT threat evolution in Q3 2021. Mobile statistics
IT threat evolution Q3 2021 IT threat evolution in Q3 2021. PC statistics IT threat evolution in Q3 2021. Mobile statistics These statistics are based on detection verdicts of Kaspersky products received from users who consented to provide statistical data. Quarterly figures According to Kaspersk...
Server-Side Request Forgery (SSRF)
concrete5/concrete5 is vulnerable to server-side request forgery. The vulnerability exists through the local IP importing in 'file.php' which allows an attacker to read the files from private local LAN servers and exploit the local network apps...
APT C-23 Hackers Using New Android Spyware Variant to Target Middle East Users
A threat actor known for striking targets in the Middle East has evolved its Android spyware yet again with enhanced capabilities that allow it to be stealthier and more persistent while passing off as seemingly innocuous app updates to stay under the radar. The new variants have "incorporated ne...
GHSA-GQPW-9Q54-9X28 Server-Side Request Forgery in Concrete CMS
Concrete CMS formerly concrete5 versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system to be vulnerable to SSRF attacks on the private LAN to servers by reading files from the local LAN. An attacker can pivot in the private LAN and exploit local network appsandb...
How to Defend against App Impersonation in 2021
Most users who install applications through legitimate channels such as the Google Play Store or the Apple Store do so with complete trust that their information is safe from malicious attacks. This makes sense, because they’re the official app stores for across the globe. However, despite tight...
PortlandLabs Concrete Cms code-related vulnerabilities
PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. PortlandLabs Concrete CMS has a code issue vulnerability that can be exploited by attackers in a private LAN and exploit local network appandb...
Rooting Malware Is Back. Here’s What to Look Out For.
Over the last several years, as the Android ecosystem matured, widely-distributed malware with rooting capabilities has become rare. But its rarity doesn’t mean it’s not still a threat. By definition, rooting malware is extremely dangerous because it can gain privileged access to the Android...
Microsoft Office Microsoft 365 Apps for Enterprise Code Execution
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Microsoft Office Microsoft 365 Apps for Enterprise Code Execution
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages stems from errors in array indexing during syntax analysis of EMF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Microsoft Office Use After Free
The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft 365 Apps for Enterprise packages is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Microsoft Office Buffer Overflow
The vulnerability of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Word Automation Services, and the Microsoft Word text editor is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow...
12 New Flaws Used in Ransomware Attacks in Q3
A dozen new vulnerabilities were used in ransomware attacks this quarter, bringing the total number of bugs associated with ransomware to 278. That’s a 4.5 percent increase over Q2, according to researchers. Five of the newbies can be used to achieve remote code execution RCE, while two can be us...
Description of the security update for Office Web Apps Server 2013: November 9, 2021 (KB5002065)
Description of the security update for Office Web Apps Server 2013: November 9, 2021 KB5002065 Applies To Office Web Apps Server 2013 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common...
Microsoft Word code injection vulnerability
Microsoft Word is a word processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Word. The following products and editions are affected: Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft 365 Apps for Enterprise for...
Microsoft FSLogix Apps Installed (Windows)
Binary data microsoftfslogixinstalled.nbin...
Microsoft Office code injection vulnerability
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office Access. The following products and...